[Openswan Users] openswan to Cisco 877
Daniel Wittenberg
daniel-wittenberg at starken.com
Thu May 3 10:31:05 EDT 2007
In this type of setup, how do you configure the rightid/leftid info on
the cisco side? I think this might fix an issue I've got but the cisco
person I'm dealing with says you can't set those and so when I do on the
openswan side the connection fails. Ideas?
Dan
> > conn openswan-cisco877
> > type=tunnel
> > keyexchange=ike
> > #keylife=1h
> > ikelifetime=5h
> > rekeyfuzz=50%
> > rekeymargin=10s
> > keyingtries=%forever
> > dpddelay=5
> > dpdtimeout=15
> > dpdaction=restart
> > disablearrivalcheck=yes
> > pfs=no
> > esp=3des-md5
> > left=192.168.254.93
>
> Left needs to be your internet ip, or if you don't have one,
> Because your not a gateway just a lan host, then you need to
> Use nat_traversal=yes, the cisco will also need to set nat-t.
>
> > leftnexthop=192.168.254.2
> > right=RemoteCisco_WAN_IP
> > rightsubnet=192.168.0.0/24
> > leftsubnet=192.168.1.0/24
> > authby=secret
> > rightid=@ciscopeer
> > leftid=@openswanpeer
> > auto=start
> >
More information about the Users
mailing list